⬆️ Pin dependencies

Author: renovate[bot]

.github/workflows/docs.yaml

@@ -49,7 +49,7 @@ jobs:
       - name: 🏗 Set up Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: "22"
+          node-version: "22.22.3"
           cache: npm
           cache-dependency-path: docs/package-lock.json
       - name: 🏗 Install documentation dependencies

.github/workflows/release.yaml

@@ -36,7 +36,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "3.12.13"
       - name: 🏗 Set package version from release tag
         shell: bash
         env:
@@ -71,7 +71,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "3.12.13"
       - name: 🏗 Set package version from release tag
         shell: bash
         env:
@@ -103,7 +103,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "3.12.13"
           architecture: ${{ matrix.platform.arch }}
       - name: 🏗 Set package version from release tag
         shell: bash
@@ -135,7 +135,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "3.12.13"
       - name: 🏗 Set package version from release tag
         shell: bash
         env:
@@ -160,7 +160,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "3.12.13"
       - name: 🏗 Set package version from release tag
         shell: bash
         env:
@@ -195,7 +195,7 @@ jobs:
       - name: 🏗 Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: "3.12"
+          python-version: "3.12.13"
       - name: 🔍 Validate the artifact set
         shell: bash
         # A failed build job already blocks publishing via `needs:`; this catches

.github/workflows/security-audit.yaml

@@ -89,7 +89,7 @@ jobs:
       - name: 🏗 Set up Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: "20"
+          node-version: "20.20.2"
           cache: npm
           cache-dependency-path: docs/package-lock.json
       - name: 🏗 Install documentation dependencies

docs/.nvmrc

@@ -1 +1 @@
-22
+v22.22.3

docs/package-lock.json

@@ -9,9 +9,9 @@
     "preview": "astro preview"
   },
   "dependencies": {
-    "@astrojs/starlight": "^0.39.3",
-    "@fontsource-variable/inter": "^5.2.8",
-    "astro": "^6.4.4",
-    "sharp": "^0.34.5"
+    "@astrojs/starlight": "0.39.3",
+    "@fontsource-variable/inter": "5.2.8",
+    "astro": "6.4.4",
+    "sharp": "0.34.5"
   }
 }